EP2774325A1 - System and method for securely waking a computer system over a network - Google Patents

System and method for securely waking a computer system over a network

Info

Publication number
EP2774325A1
EP2774325A1 EP11875075.1A EP11875075A EP2774325A1 EP 2774325 A1 EP2774325 A1 EP 2774325A1 EP 11875075 A EP11875075 A EP 11875075A EP 2774325 A1 EP2774325 A1 EP 2774325A1
Authority
EP
European Patent Office
Prior art keywords
computer system
nic
message
network
computer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP11875075.1A
Other languages
German (de)
French (fr)
Other versions
EP2774325B1 (en
EP2774325A4 (en
Inventor
Fei Zhang
Chi Feng Lee
Kun-fu CHEN
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qualcomm Inc
Original Assignee
Qualcomm Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qualcomm Inc filed Critical Qualcomm Inc
Publication of EP2774325A1 publication Critical patent/EP2774325A1/en
Publication of EP2774325A4 publication Critical patent/EP2774325A4/en
Application granted granted Critical
Publication of EP2774325B1 publication Critical patent/EP2774325B1/en
Not-in-force legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
    • G06F1/26—Power supply means, e.g. regulation thereof
    • G06F1/32—Means for saving power
    • G06F1/3203—Power management, i.e. event-based initiation of a power-saving mode
    • G06F1/3234—Power saving characterised by the action undertaken
    • G06F1/3287—Power saving characterised by the action undertaken by switching off individual functional units in the computer system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
    • G06F1/26—Power supply means, e.g. regulation thereof
    • G06F1/32—Means for saving power
    • G06F1/3203—Power management, i.e. event-based initiation of a power-saving mode
    • G06F1/3206—Monitoring of events, devices or parameters that trigger a change in power modality
    • G06F1/3209—Monitoring remote activity, e.g. over telephone lines or network connections
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/12—Arrangements for remote connection or disconnection of substations or of equipment thereof
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Power Sources (AREA)
  • Small-Scale Networks (AREA)

Abstract

System and method for securely waking a computer system over a network. A registration message may be received by a server from a network interface controller (NIC) in a first computer system over a network. The first computer system may be in a sleep mode. The first computer system may be registered by the server: identification information for the first computer system may be stored in a memory. A wakeup message may be received from a second computer system over the network. The wakeup message may include information identifying the first computer system and authentication information. The wakeup message may be sent to the first computer system over the network. The wakeup message may indicate to the NIC to wake up the first computer system. The authentication information may be authenticated by either or both of the server or the NIC prior to waking up the first computer system.

Description

SYSTEM AND METHOD FOR SECURELY WAKING A COMPUTER SYSTEM OVER A
NETWORK
BACKGROUND
Field of the Disclosure
[0001] The present invention relates generally to computer systems, and more particularly to a system and method for securely waking a computer system over a network.
Description of the Related Art
[0002] Computer systems are ubiquitous in today's society. A common feature of computer systems is an ability to enter a "sleep" (or "standby" or "low power") state to conserve power. Typically, "waking" a computer system in such a state is simple if one is in close proximity to the computer system: pressing a power button, a "wake-up" button, or triggering another local input device (such as a keyboard or a mouse) are typical means for locally waking a computer system.
[0003] However, with the increasing mobility and connectedness of computer systems, remote access to a computer system has also become a desirable capability. Network connections, e.g., via network interface controllers, can enable computer systems to communicate over local and/or wide area networks. However, if a computer is in a sleeping state, the computer system may be inaccessible to other computer systems via such a network.
[0004] Solutions for waking a computer system over a network have been proposed, but such solutions generally have significant associated problems. For example, if a sleeping computer device undergoes network address translation (NAT) (e.g., if the computer device is behind a router), this may interfere with transmission of a wake command. In some cases, such a sleeping device may be unable to receive a wake command unless proper de-militarized zone (DMZ)/port forwarding and static address resolution protocol (ARP) are set at the NAT router. This is complex and may not be desirable (e.g., for security reasons), or, in business situations, permitted by company policy. [0005] Additionally, existing solutions provide no security. Using existing techniques, anyone could wake up a sleeping computing device if the IP address or MAC address is known. As a result, the sleeping computer could be accidentally woken as a result of receiving a packet that coincidentally matches a wake command, or intentionally woken for malicious purposes, e.g., by a hacker.
[0006] Accordingly, improvements in the field would be desirable.
Summary of the Disclosure
[0007] Embodiments of the disclosure are presented in order to provide a secure system and method for securely waking a sleeping computer system over a network. Some embodiments of the disclosure are directed at a method for a server to facilitate secure wakeup of a computer system over a network (e.g., a wide-area network such as the internet), a server configured to implement the method, and program instructions comprised on a memory medium that are executable by a computer system (e.g., a server) to implement the method. Embodiments of the disclosure are also directed to a method for a network interface controller (NIC) to enable secure wakeup of a computer system over a network, and a NIC configured for use in the computer system and configured to implement the method.
[0008] One advantage of the systems and methods disclosed herein is the ability to wake up a computer system when the computer system is subject to network address translation (NAT). For example, many routers, which are commonly used to provide a local area network and provide connectivity of that local area network to a wide area network, provide NAT to the computing devices in the local area network. Such computing devices may have trouble receiving wake commands unless proper de-militarized zone (DMZ)/port forwarding and static address resolution protocol (ARP) are set at the router providing NAT. This is a complex process and in some situations (e.g., business settings), may not be permitted by company IT policy.
[0009] According to some embodiments, the systems and methods disclosed herein may advantageously include the sleeping client initiating registration with a wakeup facilitating server. By initiating contact with the server, and periodically renewing the contact, e.g., by periodically sending new registration messages, a live connection may be maintained between the sleeping computer system and the server. This may allow the server to send wakeup messages to the sleeping computer system without needing to navigate the NAT.
[0010] Another advantage of the systems and methods disclosed herein is the provision of security. Without security, it may be possible for anyone to wake up a sleeping computer system given basic information (e.g,. the IP address). This could occur maliciously, such as by a hacker, or because packets sent to the sleeping client accidentally match specified wake up patterns (such as Wake Over Lan (WOL) patterns).
[0011] According to some embodiments, the systems and methods disclosed herein may advantageously include authenticating wakeup messages by one or both of a wakeup server and the sleeping computer system itself. Additionally, in some embodiments both wakeup messages and other messages provided in the systems and methods may be encrypted, for an additional layer of security.
[0012] Embodiments of the methods for a server and a NIC configured for use in a computer system to facilitate secure wakeup of the computer system over a network may be performed as follows.
[0013] A registration message may be received from a first computer system over the network. The first computer system may include a network interface controller (NIC), from which the registration message may be received while the first computer system is in a sleep mode. The registration message may include user-selected human-readable identification information for the first computer system. The first computer system may be registered, which may include storing identification information (which may include the user-selected human-readable identification information) for the first computer system in a memory. In some embodiments, the registration message may also include a nonce and an encryption algorithm, which may also be stored in the memory.
[0014] In some embodiments, a query request may be received from a second computer system over the network. The query request may include the identification information for the first computer system.
[0015] In those embodiments in which a query request is received from the second computer system, a query reply may be sent to the second computer system over the network. The query reply may include the identification information for the first computer system, the nonce, and the encryption algorithm, and/or other information, depending on the embodiment.
[0016] A wakeup message may be received from the second computer system over the network. The wakeup message may include information identifying the first computer system. In some embodiments, the information identifying the first computer system may include the user-selected human-readable identification information for the first computer system, and/or other identification information which was stored in memory during registration of the first computer system. The wakeup message may also include authentication information. In some embodiments, the authentication information may include the nonce, which may be encrypted according to the encryption algorithm. In some embodiments, additionally or alternatively, a password or other pre-shared key (e.g., which is known to the first computer system and the second computer system) may be used as part of encrypting the nonce and/or as another type of authentication information.
[0017] The wakeup message may be sent to the first computer system. In some embodiments, the wakeup message may be authenticated by the server based on the authentication information included in the wakeup message. In such embodiments, sending the wakeup message to the first computer system may be based on successfully authenticating the authentication information in the wakeup message. Alternatively, the server may simply send the wakeup message to the first computer system and allow the NIC in the first computer system to authenticate the wakeup message.
[0018] The NIC may receive the wakeup message. The wakeup message may be authenticated by the NIC based on the authentication information. It should be noted that in some embodiments, the NIC may be configured to authenticate the wakeup message regardless of whether the server also performs authentication on the wakeup message, e.g., for extra security. If the wakeup message is successfully authenticated, the NIC may wakeup the first computer system.
[0019] In some embodiments, based on the NIC sending the registration message to the server and the server receiving the registration message from the NIC, a connection may be maintained between the NIC and the server for a pre-determined period of time after the registration message is received. As noted above, in some embodiments, this actively maintained connection may advantageously allow the server to send wakeup messages to the NIC regardless of any NAT between the server and the first computer system. Thus, according to some embodiments, registering the first computer system, receiving the query request and sending the query reply, and receiving and sending the wakeup message may be performed while the connection with the NIC is maintained. In other words, a wakeup message received by the server from a computer system may only be forwarded to the first computer system if the connection with the first computer system is still active.
[0020] The pre-determined period of time for which the connection is maintained may expire if no further messages are exchanged between the server and the NIC prior to the end of the pre-determined period of time. Accordingly, in some embodiments, a new registration message may periodically be received from the NIC (e.g., before expiration of the connection with the NIC, in order to maintain a continuous connection). Based on receiving each new registration message, the connection between the NIC and the server may be extended. For example, depending on the embodiment, a new pre-determined period of time may be established, or an additional pre-determined period of time may be added to the remaining pre-determined period of time.
Brief Description of the Drawings
[0021] A better understanding of the present invention can be obtained when the following Detailed Description of the Embodiments is read in conjunction with the following drawings, in which:
[0022] Figure 1 illustrates an exemplary system including several networked computer systems, according to one embodiment;
[0023] Figure 2 is a block diagram illustrating possible components of a computer system according to one embodiment;
[0024] Figure 3 is a flowchart diagram illustrating embodiments of a method for securely waking a computer system over a network;
[0025] Figure 4 illustrates an exemplary system including a variety of networked devices and including an exemplary message flow between the devices according to one embodiment; and
[0026] Figure 5 is a diagram illustrating a typical message format according to one embodiment.
[0027] While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and are herein described in detail. It should be understood, however, that the drawings and detailed description thereto are not intended to limit the invention to the particular form disclosed, but on the contrary, the intention is to cover all modifications, equivalents and alternatives falling within the spirit and scope of the present invention as defined by the appended claims.
Detailed Description of Embodiments of the Disclosure
Terms
[0028] The following is a glossary of terms used in the present application:
[0029] Memory Medium - Any of various types of memory devices or storage devices. The terms "memory" and "memory medium" are intended to include an installation medium, e.g., a CD-ROM, floppy disks, or tape device; a computer system memory or random access memory such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; or a non-volatile memory such as flash memory, hardware registers, a magnetic media (e.g., a hard drive), or optical storage. The memory medium may comprise other types of memory as well, or combinations thereof. The term "memory medium" may include two or more memory mediums.
[0030] Computer System - Any of various types of mobile or stationary computing or processing systems, including a personal computer system (PC), mainframe computer system, workstation, network appliance, Internet appliance, mobile phone, smart phone, laptop, notebook, netbook, or tablet computer system, personal digital assistant (PDA), multimedia device, or other device or combinations of devices. In general, the term "computer system" can be broadly defined to encompass any device (or combination of devices) having at least one processor that executes instructions from a memory medium.
[0031] With the expanding influence of the internet and the explosion in numbers of both stationary and mobile computing devices, remotely accessing one computer system from another computer system has become a commonplace activity. However, typically in order to access a computer system remotely, that computer system has to be powered on. Thus, if a user who is travelling (or even at their office) wants to access their personal computer at home from their laptop computer, it would seem that the personal computer must be left on for the entire time the user is away. However, leaving the personal computer on for such a long time may be wasteful of energy and increase wear on the personal computer. A variety of other such problematic situations could as easily be imagined.
[0032] Nearly every computer system includes the capability to enter a "sleep" (or "standby" or "low power") state to conserve power. "Waking" a computer system in such a state (i.e., returning the computer system to a fully-on state) may be simple if the user is in close proximity to the computer system: pressing a power button, a "wake-up" button, or triggering another local input device (such as a keyboard or a mouse) are typical means for locally waking a computer system.
[0033] However, given the increasingly common possibility that a user may want to access a computer remotely (but possibly infrequently), remotely waking a sleeping computer system should also be enabled. This would allow a user to put a computer system to sleep, thereby saving power and wear on the computer system, while still retaining the ability to later access the computer system remotely, e.g., over the internet.
[0034] It should be noted, though, that because of the same aforementioned expanding influence of the internet, providing a means for waking a computer system over a network (e.g., a wide area network such as the internet) without security could leave the computer system open to attack or accidental waking. Security should then also be a primary consideration in designing a system and method for remotely waking a sleeping computer system.
Fieure 1
[0035] Accordingly, embodiments of this disclosure relate to securely waking a sleeping computer system over a network. Figure 1 illustrates an exemplary system 100 including a variety of networked devices, some or all of which may be used to implement embodiments of this disclosure.
[0036] The system 100 may include a network 102 which provides communicative coupling between the various devices coupled to network 102. Network 102 may be a wide area network such as the internet, in some embodiments. Network 102 may accordingly include and/or be communicatively coupled to a plurality of other networks, such as one or more local area networks. Network 102 (including any "sub-networks") may include wired and/or wireless networks according to any of a variety of standards and versions (e.g., Ethernet, powerline communication systems, fiber optic networks, IEEE 102.11 (WiFi), IEEE 102.16 (WiMAX), etc) and including any of a variety of communicative media, as will be recognized by those of skill in the art.
[0037] Various computer systems may be coupled to network 102, including computer systems 104, 106, and 108. Computer systems 104, 106, and 108 may be coupled to network 102 directly or indirectly, e.g., via one or more intermediate networks, which like network 102, may also include wired and/or wireless networks according to any of a variety of standards and versions. Other computer systems and/or devices may also be coupled to network 102 in some embodiments.
[0038] According to one set of embodiments, computer system 104 may be a sleeping client computer system configured to be securely woken up over network 102 by end-user computer system 106 via server computer system 108. For example, computer systems 104, 106, and 108 may be configured to implement aspects of the method described below with respect to Figure 3.
[0039] As will be understood by those skilled in the art, each of computer systems 104, 106, and 108 may be implemented in a variety of ways. Figure 2 illustrates basic components which may be used to implement one or more of computer systems 104, 106, and 108 according to one set of embodiments. Other system configurations for computer system 104, 106, and 108 are also possible.
Figure 2
[0040] Figure 2 is a simplified block diagram illustrating various components of a computer system 200. According to various embodiments, computer system 200 may be used to implement one or more of computer systems 104, 106 and/or 108 shown in Figure 1 ; thus, one or more elements of computer system 200 may be configured to implement one or more aspects of the method described below with respect to Figure 3.
[0041] Computer system 200 may include a processor 202, which may be coupled to a memory medium 204. Computer system 200 may further include a network interface controller (NIC) 206 coupled to processor 202. NIC 206 may enable the computer system 200 to communicate over a network. For example, as shown, NIC 206 may include a port 210 and logic 208 configured to control port 210 independently and/or in conjunction with processor 202. Port 210 may be wired (e.g., an Ethernet, powerline, telephone line, coaxial cable, or other wired connection) or wireless (e.g., an IEEE 102.11 (WiFi), IEEE 102.16 (WiMAX), Bluetooth, or other wireless connection). In some embodiments, NIC may include multiple ports and/or support network communications via multiple communicative media (e.g., a plurality of wired and/or wireless connections).
[0042] The control logic 208 may be implemented using any of various types of logic, such as analog logic, digital logic, a processor (such as a CPU, DSP, microcontroller, etc.), an ASIC (application specific integrated circuit), an FPGA (field programmable gate array), or any combination of the above. In one embodiment, control logic 208 may be implemented partially or entirely as a hardware-based state machine. For example, in an embodiment in which computer system 200 is used to implement sleeping client computer system 104 of Figure 1 , NIC 206 may include a finite state machine configured for sending registration messages to and receiving wakeup messages from server computer system 108, and for authenticating those wakeup messages and waking up the sleeping client computer system 104.
[0043] In some embodiments, processor 202 may be a general purpose processor. For example, processor 202 may be configured to execute any of a variety of program instructions (e.g., software) stored on memory medium 204. Alternatively, or in addition, computer system 200 may include one or more dedicated (e.g., special purpose) processing units, such as microcontrollers, digital signal processors, and/or other embedded systems. In one set of embodiments, e.g., in which computer system 200 is used to implement server computer system 208 of Figure 1, memory medium 204 may include program instructions for facilitating secure wake-up of sleeping client computer system 104 over network 102, e.g., according to embodiments of the method described below with respect to Figure 3. It should also be noted that processor 202 may include a single processor or a plurality of processors (e.g., in order to increase the computing capability of computer system 200), as desired. [0044] Computer system 200 may be any of a variety of types of device, and may implement any of a variety of functionalities, according to various embodiments. For example, computer system 200 may be a mobile phone or smart phone, a tablet, netbook, laptop, desktop, server, or other computer system, a portable media player, a personal digital assistant, or generally any other type of computing device which may be used to communicate over a network in a wired or wireless manner.
[0045] As briefly noted above, computer system 200 may be implemented in a variety of ways according to various embodiments. Thus, for example, exemplary computer system 200 is described above as being representative of any of computer systems 104, 106, and 108 shown in Figure 1; those skilled in the art will recognize that this should not be understood to imply that each of computer systems 104, 106, and 108 are necessarily identical. It is possible and, in practice, may be typical for computer systems 104, 106, and 108 to include different components and differing configurations. For example, client computer systems / end user devices may typically have significant differences in capability and functionality from server computer systems.
[0046] Furthermore, as will be understood by those of skill in the art in light of this disclosure, depending on the implementation, computer system 200 may also include any of a variety of other components as desired (e.g., display, user input device(s), speaker(s), additional input/output capability, etc), for example, for implementing other functionality. Such components are not shown in order to avoid obscuring details of the disclosure.
Figure 3
[0047] Figure 3 is a flowchart diagram illustrating embodiments of a method for securely waking a computer system over a network. Embodiments of the method may be implemented by a server computer system, a sleeping client computer system (referred to herein as the first computer system), and/or an end user computer system (referred to herein as the second computer system). For example, aspects of the method of Figure 3 may typically be implemented by the devices of Figures 1-2 of this disclosure.
[0048] Thus, the first computer system may include a network interface controller (NIC) including a port and logic configured to register with the server and receive wakeup messages over the server, to authenticate those wakeup messages, and to wake the first computer system, all while the first computer system is in a sleep mode.
[0049] Additionally, the server computer system may include a processor and a memory medium including program instructions executable by the processor to facilitate waking of the first computer system by the second computer system over the network.
[0050] While the steps described below with respect to Figure 3 are shown in a certain order, it should be noted that, according to various embodiments, one or more of the steps may be omitted, repeated, or performed in a different order than shown. One or more additional steps may also or alternatively be added, as desired. The method may be performed as follows.
[0051] At step 302, a registration message may be received by the server. The registration message may be sent by the NIC of the first computer system over the network. The network may be a wide-area network, such as the internet. The registration message may be sent by the NIC while the first computer system is sleeping. For example, the NIC may continue to draw a small amount of power, in order to preserve the limited functionality needed to send the registration message and perform other functions related to maintaining the capability to receive and authenticate a wakeup message and wake the computer system, even while the computer system is otherwise in a sleep mode. Depending on the embodiment, this may be facilitated by implementing the logic in the NIC responsible for maintaining the secure wakeup capability as a simple hardware logic system, such as a state machine, as such a system may have a lower power requirement than other systems. However, various other embodiments, including those in which the "wakeup" logic is implemented as a processor (e.g., an embedded processor) executing program instructions stored on a memory medium, are also possible.
[0052] The registration message may include information identifying the first computer system. For example, in some embodiments, the registration message may include the hostname of the first computer, and/or netbios shared folders. In some embodiments an IP address of the first computer may (e.g., implicitly or explicitly) be included in the registration message. According to some embodiments, either or both of IPv4 and IPv6 may be supported. Additionally (or alternatively), the registration message may include user-selected human-readable identification information for the first computer system. For example, the first computer system may be configured by a user (e.g., prior to entering the sleep mode) to have an identification name and/or number selected by that user, such as "homel23" or "bobsworkstation".
[0053] In some embodiments, the registration message may also include information that may be used for authentication purposes. For example, in one embodiment, the registration message may include a nonce (e.g., a random or pseudorandom number, such as a random octet) and an encryption method which may be used to encrypt the nonce (and/or other information). Alternatively, or in addition, a password or other authentication information (e.g., depending on the implementation) may be included in the registration message. In some embodiments, the authentication information (e.g., the nonce and/or the encryption method) may be generated by the first computer system and/or selected by a user.
[0054] At step 304, the first computer may be registered by the server. Registering the first computer system may include storing some or all of the information included in the registration message from the first computer system in a memory. For example, any or all of the hostname, netbios shared folders, IP address, user-selected human-readable ID, and/or authentication information for the first computer system may be stored in the memory.
[0055] In some embodiments, the NIC of the first computer system and the server may maintain an active connection for a pre-determined period of time after the first computer system sends the registration message to the server. For example, the server may initiate a timeout timer of a pre-determined length upon receiving the registration message. After the pre-determined period of time (which may be 5, 15, 30, or 60 seconds, or any other length of time, as desired), the connection may expire. If the connection does timeout, the server may be unable to send messages (such as a wakeup message) to the NIC. Alternatively, the server may be able to send messages to the NIC, but some or all of the registration information (e.g., the nonce and/or the encryption algorithm) may no longer be valid. [0056] Accordingly, it may be desirable for the first computer system to periodically send a new registration message to the server, in order to maintain the active connection with the server and thereby maintain the capability to receive a wakeup message over the network, as long as the first computer system remains in a sleep mode. Thus, in some embodiments, the server may periodically receive a new registration message from the NIC. Each new registration message may include similar types of information as were included in the original registration message. In some embodiments, each new registration message may be identical to the previous registration messages. Alternatively, some information may be updated or changed in some or all new registration messages; for example, in some embodiments, the nonce may be updated periodically for security reasons. The new registration message(s) may be sent with a periodicity such that each new registration message is received by the server before expiration of the connection with the NIC. As a result of receiving each new registration message, the server may extend the connection with the NIC for an additional pre-determined period of time, or simply renew the time-out timer, such that the connection between the NIC of the first computer system and the server may remain continuously active as long as the first computer system is in the sleep mode.
[0057] At step 306, a query request may be received by the server. The query request may be sent by the second computer system. In some embodiments, the query request may be initiated by a user (e.g., a user of both the first computer system and the second computer system) of the second computer system, as a first step towards waking the first computer system over the network. The query request may include identification information for the first computer system. For example, the query request may include the host name, IP address, and/or the user-selected human-readable ID of the first computer. In one embodiment, the query request may include just the user-selected human-readable ID of the first computer. This may be preferable in some embodiments, as it may allow a user to make the query request using just the (presumably easier to remember) ID which they (or another human user) may have selected.
[0058] In other embodiments, additional information may also or alternatively be included in the query request. For example, in some embodiments, the query request may include authentication information (such as a password, symmetric or asymmetric key encrypted information, and/or other authentication information, depending on the implementation), which the server may authenticate prior to responding to the query request.
[0059] At step 308, a query reply may be sent to the second computer system by the server. The query reply may include information needed by the second computer system in order to generate and send a wakeup message to the first computer system. For example, the query reply may include some or all of the information received by the server from the first computer system in the registration message. As one example, in the above described embodiment in which the registration message includes a nonce and an encryption algorithm, the query reply may include the user-selected human-readable ID of the first computer, the nonce, and the encryption algorithm. In some embodiments, the query reply may also or alternatively include the hostname and/or netbios shared folders of the first computer system. The query reply may be received by the second computer system.
[0060] At step 310, a wakeup message may be received by the server. The wakeup message may be generated and sent by the second computer system. The wakeup message may include identification information for the first computer system and authentication information.
[0061] In some embodiments, the identification information included in the wakeup message may again include the user-selected human-readable ID of the first computer. Additionally, or alternatively, one or more other forms of identification information for the first computer system may be included in the wakeup message. For example, in some embodiments one or more of the hostname, netbios shared folders, and/or IP address of the first computer system may be included in the wakeup message.
[0062] In some embodiments, the second computer system may use information received in the query reply in order to generate the authentication information to be included in the wakeup message. For example, if the query reply includes the aforementioned nonce and encryption algorithm, the second computer system may use the encryption algorithm to encrypt the nonce, and include the encrypted nonce in the wakeup message. Alternatively, or additionally, the wakeup message may include a pre-shared key. In other words, the wakeup message may include information which is known to the first computer system and to (e.g., a user of) the second computer system, which the first computer system may use to authenticate the wakeup message. An example which may be used in some embodiments is a password, e.g., a user-selected sequence of alphanumeric characters. Other embodiments may include other types of pre-shared keys.
[0063] It should be noted that in some embodiments, steps 306 and 308 (query request and query reply) may be omitted. For example, in some embodiments, a user at the second computer system may already have all of the necessary information to generate and send a wakeup message to the first computer system (i.e., via the server). For example, according to some embodiments, a user of the second computer may be able to provide the user-selected human-readable ID of the first computer and a user-selected pre-shared password as inputs, based on which the second computer system may generate and send the wakeup message to the server, thereby bypassing the query request and query reply steps.
[0064] At step 312, the wakeup message may be sent to the first computer system by the server. In some embodiments, the wakeup message may be sent by the server to the first computer system as received from the second computer system. Alternatively, the server may modify or authenticate the wakeup message before sending the wakeup message to the first computer system.
[0065] The first computer system may receive the wakeup message from the server computer system. The wakeup message may specifically be received by the NIC of the first computer system (e.g., since the computer system may generally be in a sleep mode). The NIC may authenticate the wakeup message (e.g., in addition to or instead of the server), and, if the wakeup message is successfully authenticated, the NIC may wake up the first computer system. After waking, the first computer system may be in a fully-on state, and may be capable of interacting with other computer systems (such as the second computer system) over the network.
[0066] The manner in which the NIC is configured to authenticate the wakeup message may vary depending on the embodiment. For example, if the wakeup message includes the nonce encrypted according to the encryption algorithm, authenticating the wakeup message may include decrypting the encrypted nonce included in the wakeup message and comparing it to the original nonce, or comparing the received encrypted nonce to a pre-configured encrypted nonce (e.g., generated by the first computer based on the encryption algrorithm). If the comparison indicates that they are the same, the wakeup message may be authenticated and the NIC may wake up the first computer system. The nonce included in the wakeup message may be encrypted (e.g., using the encryption algorithm) according to the key provided by the second computer system. The key can be a password, a key from pre-shared x.509 certificate, or some other kind of pre-shared key. Thus, in some embodiments, the pre-shared key may be included by using it to encrypt the nonce. In other words, in some embodiments, the pre-shared key may not transferred in plain text, e.g., for security reasons; however, in other embodiments the password may be so transferred, if desired.
[0067] Although specific examples of authentication systems are given above (e.g., passwords, pre-shared keys), it should be noted that any of a variety of other authentication systems may also or alternatively be implemented in some embodiments. For example, any symmetric or asymmetric cryptosystem can be implemented. Furthermore, an authentication server, such as Kerberos, RADIUS, Domain Authentication, or another authentication server, may be used if desired.
[0068] Furthermore, embodiments are also considered in which some or all of the above- described messages (e.g., registration messages, query requests, query replies, wakeup messages) are encrypted (e.g., using a symmetric, asymmetric, or other encryption system), in order to prevent unauthorized users from gaining access to information which would allow them to wake up the first computer system.
[0069] Embodiments of the method may include several advantages over existing methods for remotely waking a sleeping computer system. For example, most existing methods relate to methods for waking a sleeping computer over a local area network. Examples include wake over LAN (WOL) patterns (in which a specified offset and matching pattern indicate a wake command), magic WOL (in which a packet contains 16 continuous MAC addresses of a sleeping computer system), and link change (in which media, such as a network cable, is connected). These methods are not intended to be performed through NAT. Even those that could be used through NAT would require extensive configuration, which may have the undesirable side effect of decreasing the security of the target computer system. Furthermore, none of these methods include security. Thus, embodiments of the method of Figure 3, which are both capable of being performed through NAT without any special configuration and include security / authentication features, represent a significant improvement over the existing solutions.
Figure 4
[0070] Figure 4 is an illustration of an exemplary system 400 in which the method described above with respect to Figure 3 may be implemented according to one embodiment. The system 400 of Figure 4 is shown and described herein in order to provide a more specific example of a system and manner in which embodiments of the disclosure may be implemented. However, as one of skill in the art will appreciate, numerous variations on and alternatives to the specific details of the system of Figure 4 are possible, and neither Figure 4 nor the description thereof should be considered limiting to the disclosure as a whole.
[0071] As shown, the system 400 may include a network 402, which may be a wide-area network (WAN), such as the internet. Server computer system 404 may be coupled to WAN 402 at a first location. End user computer system 406 may be coupled to WAN 402 at a second location. Sleeping client computer systems 408 and 410 may be coupled to WAN 402 via a local area network (LAN) 412. LAN 412 may be provided (e.g., wirelessly) by router 414, which may provide network address translation (NAT) on the LAN 412 side of a firewall 416.
[0072] Sleeping client 408 may register with server 404 via LAN 412 and WAN 402. In the embodiment of Figure 4, registering may be performed by a NIC (not shown) in sleeping client 408, and may include sending a message including an encoded hostname and netbios shared folders of the sleeping client 408, an encoded ID of the sleeping client 408 (which may be user-selected, e.g., prior to the sleeping client 408 entering the sleep mode), a nonce (which may be an octet which is randomly generated by the sleeping client 408), and an encrypt algorithm. The server may store all of this information.
[0073] After sleeping client 408 has registered with server 404, end user 406 may generate and send a query request to the server 404. The query request may simply include the encoded ID of the sleeping client 408.
[0074] Based on receiving the query request from end user 406, the server 404 may send a query reply to end user 406. The query reply may include the encoded ID of the sleeping client 408, and the nonce and the encrypt algorithm from the register message.
[0075] Having received the query reply from the server 404, the end user 406 may generate a wakeup message with a security key. The wakeup message may include the encoded ID of the sleeping client 408, and the nonce encrypted according to a key input of the end user. In other words, the nonce may be encrypted using the encrypt algorithm included in the register message according to the key input (e.g., a password or other pre- shared key) by the end user 406.
[0076] The end user 406 may send the wakeup message to the server 404, which may forward the wakeup message to the sleeping client 408. The NIC in the sleeping client 408 may receive the wakeup message, and check the encrypted nonce. If it is encrypted using the correct key, the NIC may wake up the sleeping client 408.
Figure 5
[0077] Figure 5 illustrates an exemplary message format which may be used as part of a system and method for securely waking a computer system over a network according to one embodiment. The message format illustrated may take the form of a user datagram protocol (UDP) packet.
[0078] As shown, the message may include a media access control (MAC) header, an internet protocol (IP) header, and a UDP header. Following these headers, which may be implemented as known in the art according to UDP protocol, a "secure wake over internet" ("SWOI") header may be included. The SWOI header may include version information, a command (CMD) indicator, a length field, an XID, and an Error Code, according to one embodiment. The version field may indicate a version of the message format. The CMD field may indicate a type of SWOI message, such as a registration message, a query request, a query reply, or a wakeup message. The length field may indicate a length (e.g., in bytes) of the options list to follow. Error correction coding information and/or other information may also be included in some embodiments. In some embodiments, a portion of the message format may be reserved for changes to future changes to the message format. While specific lengths in bytes are shown for the SWOI header fields (e.g., 1 byte for version, 1 byte for CMD, 2 bytes for length, 4 bytes for XID, and 2 bytes for Error Code), these are exemplary only and other lengths are also considered.
[0079] The options list may include the substance of a message. For example, possible options could include an encoded host name, a user-selected ID, a nonce, an encrypt algorithm, or any of a variety of other options, potentially depending on the message type. According to one embodiment, each option may include three fields: option type (e.g., identifying a type of the option), option length (e.g., identifying a length of the option data field), and the option data itself. According to one embodiment, the option type field may be 1 byte long, the option length field may be 2 bytes long, and the option data field may be as long as is indicated by the option length field; other field lengths are also possible. In some embodiments, a single packet may include multiple options in the option list. In some other embodiments, each packet may only include a single option.
[0080] While the message format shown in Figure 5 is one possible UDP based message format, those skilled in the art will recognize that other UDP based message formats, or any of a variety of other types of packets (e.g., using other protocols, such as TCP) may be used, as desired. Thus, while the message format shown in Figure 5 represents one possible means of implementing the messages described herein, neither Figure 5 nor this description thereof should be considered limiting to the disclosure as a whole.
[0081] Although the embodiments above have been described in considerable detail, numerous variations and modifications will become apparent to those skilled in the art once the above disclosure is fully appreciated. It is intended that the following claims be interpreted to embrace all such variations and modifications.

Claims

WHAT IS CLAIMED IS:
1. A computer- implemented method for a server to facilitate secure wakeup of a computer system over a network, the method comprising:
receiving a registration message from a first computer system over the network, wherein the first computer system comprises a network interface controller (NIC), wherein the registration message is received from the NIC while the first computer system is in a sleep mode;
registering the first computer system, wherein said registering comprises storing identification information for the first computer system in a memory;
receiving a wakeup message from a second computer system over the network, wherein the wakeup message comprises information identifying the first computer system and authentication information;
sending the wakeup message to the first computer system over the network, wherein the wakeup message indicates to the NIC to wake up the first computer system.
2. The computer-implemented method of claim 1, further comprising:
maintaining a connection with the NIC for a pre-determined period of time after receiving the registration message from the NIC based on receiving the registration message from the NIC;
wherein said registering the first computer system, receiving the wakeup message, and sending the wakeup message are performed while the connection with the NIC is maintained.
3. The computer-implemented method of claim 1, further comprising:
maintaining a connection with the NIC for a pre-determined period of time after receiving the registration message based on receiving the registration message;
periodically receiving a new registration message from the NIC, wherein the new registration message is received before expiration of the connection with the NIC; maintaining the connection with the NIC for an additional pre-determined period of time after receiving each respective new registration message based on receiving the respective new registration message.
4. The computer-implemented method of claim 1 ,
wherein the registration message comprises user-selected human-readable identification information for the first computer system, wherein said storing identification information for the first computer system comprises storing the user- selected human-readable identification information for the first computer system;
wherein the information identifying the first computer system in the wakeup message comprises the user-selected human-readable identification information for the first computer system.
5. The computer-implemented method of claim 1,
wherein the authentication information comprises a pre-shared key, wherein the pre-shared key is known to the first computer system and the second computer system.
6. The computer-implemented method of claim 1 ,
wherein the network is a wide-area-network, wherein the method is implemented by a server computer system.
7. The computer-implemented method of claim 1,
wherein the registration message comprises the identification information for the first computer system, a nonce, and an encryption algorithm;
wherein said registering further comprises storing the nonce and the encryption algorithm in the memory;
wherein the method further comprises:
receiving a query request from the second computer system, wherein the query request comprises the identification information for the first computer system; sending a query reply to the second computer system, wherein the query reply comprises the identification information for the first computer system, the nonce, and the encryption algorithm;
wherein the authentication information in the wakeup message comprises the nonce, wherein the nonce is encrypted according to the encryption algorithm.
8. The computer-implemented method of claim 1, further comprising:
authenticating the wakeup message based on the authentication information in the wakeup message;
wherein sending the wakeup message to the first computer system is based on successfully authenticating the authentication information in the wakeup message.
9. A computer-readable memory medium comprising program instructions for a server to facilitate secure wakeup of a first computer system over a network, wherein the program instructions are executable by a processor to:
receive a registration message from the first computer system over the network, wherein the first computer system comprises a network interface controller (NIC), wherein the registration message is received from the NIC while the first computer system is in a sleep mode;
register the first computer system, wherein said registering comprises storing identification information for the first computer system in a memory;
receive a wakeup message from a second computer system over the network, wherein the wakeup message comprises information identifying the first computer system and authentication information;
send the wakeup message to the first computer system over the network, wherein the wakeup message indicates to the NIC to wake up the first computer system.
10. The computer-readable memory medium of claim 9, wherein the program instructions are further executable to: maintain a connection with the NIC for a pre-determined period of time after receiving the registration message from the NIC based on receiving the registration message from the NIC;
wherein the program instructions are executable to register the first computer system, receive the wakeup message, and send the wakeup message within the predetermined period of time.
11. The computer-readable memory medium of claim 9, wherein the program instructions are further executable to:
maintain a connection with the NIC for a pre-determined period of time after receiving the registration message based on receiving the registration message;
periodically receive a new registration message from the NIC, wherein the new registration message is received before expiration of the connection with the NIC; maintain the connection with the NIC for an additional pre-determined period of time after receiving each respective new registration message based on receiving the respective new registration message.
12. The computer-readable memory medium of claim 9, wherein the registration message comprises user-selected human-readable identification information for the first computer system, wherein the program instructions are further executable to:
store the user-selected human-readable identification information for the first computer system;
wherein the information identifying the first computer system in the wakeup message comprises the user-selected human-readable identification information for the first computer system.
13. The computer-readable memory medium of claim 9,
wherein the authentication information comprises a pre-shared key, wherein the pre-shared key is known to the first computer system and the second computer system.
14. The computer-readable memory medium of claim 9,
wherein the network is a wide-area-network.
15. The computer-readable memory medium of claim 9,
wherein the registration message comprises the identification information for the first computer system, a nonce, and an encryption algorithm;
wherein said registering further comprises storing the nonce and the encryption algorithm in the memory;
wherein the program instructions are further executable to:
receive a query request from the second computer system, wherein the query request comprises the identification information for the first computer system;
sending a query reply to the second computer system, wherein the query reply comprises the identification information for the first computer system, the nonce, and the encryption algorithm;
wherein the authentication information in the wakeup message comprises the nonce, wherein the nonce is encrypted according to the encryption algorithm.
16. The computer-readable memory medium of claim 9, wherein the program instructions are further executable to:
authenticate the wakeup message based on the authentication information in the wakeup message;
wherein sending the wakeup message to the first computer system is based on successfully authenticating the authentication information in the wakeup message.
17. A network interface controller (NIC) configured for use in a computer system, the NIC comprising:
a first port for communicating over a network;
logic configured to facilitate securely waking the computer system over a network, wherein the logic is configured to operate while the computer system is in a sleep mode, wherein the logic is configured to: send, via the network, a registration message to a server; receive, via the network, a wakeup message from the server, wherein the wakeup message comprises authentication information;
authenticate the wakeup message based on the authentication information; wake the computer system.
18. The NIC of claim 17, wherein the logic is further configured to:
maintain a connection with the server for a pre-determined period of time after sending the registration message;
wherein the logic is configured to receive the wakeup message from the server before expiration of the connection with the server.
19. The NIC of claim 17, wherein the logic is further configured to:
maintain a connection with the server for a pre-determined period of time after sending the registration message;
periodically send a new registration message to the server before expiration of the connection with the server;
maintain the connection with the server for an additional pre-determined period of time after sending each respective new registration message based on sending the respective new registration message.
20. The NIC of claim 17,
wherein the registration message comprises user-selected human-readable identification information for the first computer system;
wherein the wakeup message comprises the user-selected human-readable identification information for the first computer system.
The NIC of claim 17, wherein the authentication information comprises a pre-shared key, wherein the pre-shared key is known to the first computer system and to a second computer system, wherein the wakeup message originates from the second computer system.
22. The NIC of claim 17, wherein the network is a wide-area-network.
EP11875075.1A 2011-11-01 2011-11-01 System and method for securely waking a computer system over a network Not-in-force EP2774325B1 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2011/081627 WO2013063758A1 (en) 2011-11-01 2011-11-01 System and method for securely waking a computer system over a network

Publications (3)

Publication Number Publication Date
EP2774325A1 true EP2774325A1 (en) 2014-09-10
EP2774325A4 EP2774325A4 (en) 2015-06-24
EP2774325B1 EP2774325B1 (en) 2018-02-28

Family

ID=48191190

Family Applications (1)

Application Number Title Priority Date Filing Date
EP11875075.1A Not-in-force EP2774325B1 (en) 2011-11-01 2011-11-01 System and method for securely waking a computer system over a network

Country Status (7)

Country Link
US (1) US9746907B2 (en)
EP (1) EP2774325B1 (en)
JP (1) JP5823627B2 (en)
KR (1) KR101599695B1 (en)
CN (1) CN104025512B (en)
IN (1) IN2014CN02454A (en)
WO (1) WO2013063758A1 (en)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10756918B2 (en) * 2008-12-02 2020-08-25 ioBridge, Inc. Activating a device via a module-based device interaction system
EP2817755B1 (en) * 2012-02-20 2021-03-24 Intel Corporation Directed wakeup into a secured system environment
US9152195B2 (en) * 2013-01-21 2015-10-06 Lenovo (Singapore) Pte. Ltd. Wake on cloud
US10488909B2 (en) * 2014-02-14 2019-11-26 Hewlett-Packard Development Company, L.P. Communicating commands to an embedded controller of a system
JP6373087B2 (en) * 2014-06-20 2018-08-15 キヤノン株式会社 Information processing apparatus, control method thereof, and program
TWI646799B (en) * 2016-08-29 2019-01-01 物聯智慧科技（深圳）有限公司 Remote wake-up method, connection server and networked device with sleep mode
EP3513601A4 (en) * 2016-09-13 2020-05-20 Link II, Charles M. Method and system for low power internetwork communication with machine devices
US11382174B2 (en) * 2017-03-31 2022-07-05 Interdigital Ce Patent Holdings, Sas Method to awaken a network access device from the internet
US10771439B2 (en) * 2017-06-28 2020-09-08 Microsoft Technology Licensing, Llc Shielded networks for virtual machines
US10871815B2 (en) * 2018-09-28 2020-12-22 Sonos, Inc. Network identification of portable electronic devices while changing power states

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6311276B1 (en) * 1998-08-25 2001-10-30 3Com Corporation Secure system for remote management and wake-up commands
US6493824B1 (en) * 1999-02-19 2002-12-10 Compaq Information Technologies Group, L.P. Secure system for remotely waking a computer in a power-down state
US6678728B1 (en) * 1999-12-03 2004-01-13 3Com Corporation Method and apparatus for automatically loading device status information into a network device
US7082129B2 (en) * 2002-04-29 2006-07-25 International Business Machines Corporation Secure method and system to prevent external unauthorized remotely initiated power up events in computer
JP2004199543A (en) 2002-12-20 2004-07-15 Fuji Xerox Co Ltd Server, client, and network system
US7574600B2 (en) * 2004-03-24 2009-08-11 Intel Corporation System and method for combining user and platform authentication in negotiated channel security protocols
US7594116B2 (en) * 2005-04-28 2009-09-22 Proofpoint, Inc. Mediated key exchange between source and target of communication
JP4741292B2 (en) 2005-06-09 2011-08-03 株式会社日立製作所 Device management system
JP2007036624A (en) 2005-07-26 2007-02-08 Matsushita Electric Ind Co Ltd Communication management apparatus, device, and communication system
US20070067445A1 (en) * 2005-09-16 2007-03-22 Smart Link Ltd. Remote computer wake-up for network applications
US20080025279A1 (en) 2006-07-31 2008-01-31 Motorola, Inc. Synchronization of multi-system wakeup
US8369254B2 (en) * 2007-06-28 2013-02-05 Intel Corporation Network interface apparatus
US20090073481A1 (en) * 2007-09-17 2009-03-19 Ferlitsch Andrew R Method and system for external preprocessing of service requests directed to a sleeping node
US20090210519A1 (en) 2008-02-18 2009-08-20 Microsoft Corporation Efficient and transparent remote wakeup
US8095667B1 (en) 2008-02-19 2012-01-10 Marvell International Ltd. Methods and apparatus for remotely waking up a computer system on a computer network
US20110302278A1 (en) * 2008-02-22 2011-12-08 Logicplant Method for remote wake-up a computer connected to a network
US8533506B2 (en) * 2010-06-04 2013-09-10 Lenovo (Singapore) Pte. Ltd. System wakeup on wireless network messages
US8498229B2 (en) * 2008-12-30 2013-07-30 Intel Corporation Reduced power state network processing
US8291258B2 (en) * 2010-01-08 2012-10-16 Juniper Networks, Inc. High availability for network security devices
US8286011B2 (en) * 2010-02-28 2012-10-09 Freescale Semiconductor, Inc. Method of waking processor from sleep mode
US8379540B2 (en) * 2010-05-03 2013-02-19 Microsoft Corporation System for synchronous and asynchronous gaming modes
US8850219B2 (en) * 2010-05-13 2014-09-30 Salesforce.Com, Inc. Secure communications
US9223583B2 (en) * 2010-12-17 2015-12-29 Oracle International Corporation Proactive token renewal and management in secure conversations
US20160192403A1 (en) * 2014-12-30 2016-06-30 Qualcomm Incorporated Mechanism to provide lte voice, internet and embms services over ethernet for connected home architecture

Also Published As

Publication number Publication date
JP5823627B2 (en) 2015-11-25
WO2013063758A1 (en) 2013-05-10
CN104025512A (en) 2014-09-03
US9746907B2 (en) 2017-08-29
CN104025512B (en) 2017-10-13
EP2774325B1 (en) 2018-02-28
US20140298066A1 (en) 2014-10-02
EP2774325A4 (en) 2015-06-24
JP2015504544A (en) 2015-02-12
KR20140088896A (en) 2014-07-11
IN2014CN02454A (en) 2015-08-07
KR101599695B1 (en) 2016-03-14

Similar Documents

Publication Publication Date Title
US9746907B2 (en) Secure wakeup for computer systems over a network
JP5173999B2 (en) Method, program, computer device
US8107396B1 (en) Host tracking in a layer 2 IP ethernet network
US20090210519A1 (en) Efficient and transparent remote wakeup
EP2991271B1 (en) Remotely controllable electronic device, network system for controlling the electronic device and remote control method thereof
US9489023B1 (en) Secure wake on LAN with white list
US9288269B2 (en) Network presence offload
US11962508B2 (en) Device-enabled access control in a mesh network
US11811517B2 (en) Enabling efficient communication in a hybrid network
Bannis et al. Creating a secure, integrated home network of things with named data networking
US10243741B2 (en) Key exchange and mutual authentication in low performance devices
US11785089B2 (en) Updating communication parameters in a mesh network
Masuduzzaman et al. Two phase authentication and VPN-based secured communication for IoT home networks
US11929980B1 (en) Sharing domain name service resources in a mesh network
US11979321B1 (en) Enabling partial access to a local area network via a meshnet device
US20230319594A1 (en) Optimizing meshnet connections in a mesh network
US20230247008A1 (en) Enabling a secure mesh network
Mišic ZigBee: A long way to go?

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20140408

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAX Request for extension of the european patent (deleted)
RA4 Supplementary search report drawn up and despatched (corrected)

Effective date: 20150528

RIC1 Information provided on ipc code assigned before grant

Ipc: G06F 1/32 20060101ALI20150521BHEP

Ipc: H04L 12/12 20060101ALI20150521BHEP

Ipc: H04L 29/06 20060101ALI20150521BHEP

Ipc: H04L 12/28 20060101AFI20150521BHEP

17Q First examination report despatched

Effective date: 20161102

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20170905

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 975278

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180315

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602011046170

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20180228

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 975278

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180228

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180528

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180529

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180528

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602011046170

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20181129

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 602011046170

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20181101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181101

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20181130

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181130

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181130

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190601

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181101

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181130

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181130

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180228

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180228

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20111101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180628